Lucene search
+L

11 matches found

NVD
NVD
•added 2026/08/20 5:19 p.m.•15 views

CVE-2026-77019

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/20 4:15 p.m.•9 views

CVE-2026-77019 CodeAstro Apartment Visitor Management System forgotpw.php sql injection

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/20 4:15 p.m.•40 views

CVE-2026-77019 CodeAstro Apartment Visitor Management System forgotpw.php sql injection

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/20 4:15 p.m.•16 views

EUVD-2026-63421

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS5.5AI score0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/20 4:15 p.m.•35 views

CVE-2026-77019

CodeAstro Apartment Visitor Management System 1.0 has a SQL injection in /apartment-visitor/forgotpw.php via the secode argument, exploitable remotely without authentication (CVSS 7.5 HIGH). A proof-of-concept exploit is publicly disclosed; no patch version is provided. Exploitation details are n...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•2 views

CVE-2026-77019: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•27 views

PT-2026-79056

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7.3AI score0.00431EPSS
SaveExploits0References7
CVE
CVE
•added 2025/04/06 8:31 a.m.•80 views

CVE-2025-3314

CVE-2025-3314 affects SourceCodester Apartment Visitor Management System 1.0. The vulnerability lies in the /forgotpw.php handler, where the query parameter “secode” is improperly processed, leading to SQL injection. This enables remote attackers to influence the database without authentication. ...

9.8CVSS7.5AI score0.00555EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/06 12:00 a.m.•2 views

CVE-2025-3314: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forgotpw.php. The manipulation of the argument secode leads to sql injection. The attack can be launched...

9.8CVSS6.9AI score0.00555EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2015/11/08 12:35 p.m.•15 views

ms11.net XSS vulnerability

Vulnerable URL: http://www.ms11.net/login/forgotpw.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 828008 Google Pagerank| 3 VIP website status:| No Check ms11.net SSL...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/07 12:00 a.m.•3 views

CVE-2008-6637: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the 1 school and 2 email parameters...

4.3CVSS5.8AI score0.01718EPSS
SaveExploits2References2
Rows per page
Query Builder